Join GitHub today
GitHub is home to over 40 million developers working together to host and review code, manage projects, and build software together.Sign up
cross site scripting in mermaid #869
Hi, I found XSS issues in mermaid. This affects all the projects that use mermaid.
There are three different ways to trigger.
The first one:
The second one:
The third one(needs click, both nodes will work):
Here is an example that affects other projects which using mermaid.
And all above three payload would work on hackmd.io
Hope you can fix soon!